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20 December 1984 


NOTE FOR: DD/ICS 

SUBJECT: COMPUSEC SAFEGUARDS for 

Review and Comment 


25X1 


STAT 


, c ..]• , Pe ^EI guidance, attached 

thJ h f ™ al d »* a Jt of the SAFEGUARDS document 
that we developed as part of the COMPUSEC 
project. The package includes: 

o a memo from | J to you 

forwarding the report; 

o a draft copy of a proposed letter 
from D/ICS and you to the DDCI 
requesting his signature on the 
cover letter to the SAFEGUARDS; and 

o a draft copy of the proposed 

cover letter for DDCI's signature. 

2. The SAFEGUARDS document is being 

frllu the P rint i n 9 plant for publication. 

With the current backlog at the printing plant, 
it is expected to take until the third week 
in January 1985 to publish this document. I 
understand that final changes can be made to 
the document up to 4 January 1985. 

3. Request your review and comment on 
this package. 


25X1 
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i i 

The Deputy Director of Central Intelligence 

Washington, D. C. 20505 



MEMORANDUM FOR: See Distribution 

SUBJECT: Computer Security (COMPUSEC) SAFEGUARDS 


25X1 

25X1 

25X1 


25X1 


25X1 


1. The attached SAFEGUARDS document identifies security requirements for 
the protection of information derived from sensitive intelligence methoas ana 
sources which is processed in the "critical" systems evaluated as part of the 
PCI's C omputer Security (COMPUSEC) Project under the direction ofQ 

The COMPUSEC Project is an Intelligence Community effort which has 

provided an assessment of the posture of the security of automated systems 
processing information derived from sensitive methods and sources, identified 
threats to automated systems processing such materials, and recommended 
actions for the NFIB that will improve the security of these systems. 


2. I directed that these security SAFEGUARDS be developed to reduce 
identified vulnerabilities associated with processing information derived from 
sensitive methods and sources in the "critical" automated systems and networks 
which were selected by the senior members of the Intelligence Community. The 
security assessments of these "critical" systems were made using an early 
draft of the SAFEGUARDS and were based in part on the DoD Computer Security 
Center's Evaluation Criteria. When fully implemented in the "critical" 
systems, the SAFEGUARDS will correct the security shortfalls and reduce the 
risks currently asso ciated w ith processing this sensitive information in the 
"critical" systems. [ 


3. The SAFEGUARDS are mandatory for all thirteen "critical" systems 
assessed as part of the COMPUSEC project and should be integrated into these 
systems by the end of FY86. These SAFEGUARDS should also be used on a 
voluntary basis as a guideline for integration of these security protection 
measures in all new systems processing information derived from sensitive 
methods and sources and in those systems undergoing major system upgrades. 


uohn M. McMahon 


Attachment: a/s 


SECRET 
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SUBJECT: Computer Security (COMPUSEC) SAFEGUARDS 


Distribution: 

Action 

DIRNSA (Lieutenant General Lincoln D. Faurer, USAF) 

1 - D/D1A (Lieutenant General James A. Williams, USA) 

1 - EXDIR/C1A (Jim Taylor) 

1 - D/1NR (Hugh Montgomery) 

1 - Dep. Assistant Sec. for Intelligence, DOE (Charles V. Boykin) 

1 - Spec. Assistant to Sec. for National Security, lreasury 
(Douglas Mulholland) 

1 - Assistant Director, Intelligence Div., FBI (Edward J. O'Malley) 

1 - Acting General Counsel, DOC (Irving P. Margulies) 

1 - Counsel for Intelligence Policy, Dept, of uustice (Mary C. Lawton) 

Information 

1 - DN1 (Rear Admiral John Butts, USN) 

1 - ACSl/Army (Lieutenant General William E. Odom, USA) 

1 - ACS1/AF (Major General James C. Pfautz, USAF) 

1 - Hdqs/USMC (Brigadier General Lloyd W. Smith, Jr., USMC) 

1 - Under Secretary of the Air Force (Edward C. Aldrioge, or.) 

1 - Director, Los Alamos National Labs 
1 - DUSD(P) (General Richard G. Stilwell, USA (Ret.)) 

1 - D/ICS 
1 - DD/ ICS 
1 - Chm/SECOM 
1 - Chm/CCIS 
1 - D/PPS 
1 - D/PBS 
1 - Chm/IHC 
1 - ICS Registry 
1 - IHC Subject 
1 - IHC Chrono 


25X1 


lCS/lHCj 


(7 Jan 85) 
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